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(57) A content usage management system 1 com- 
prises a user terminal 200a using a content as a digital 
production and a server 1 00 managing usage of the con- 
tent in the userterminal 200a over a communication net- 
work 300; wherein the sever 100 includes a user right 
infomriatlon DB 120 that memorizes right information re- 
garding a usage right of the content entitled to a user 
who uses the terminal 200a and a content Information 



generation unit 170 that generates LT which is right in- 
fonmatlon indicating a part of usage right entitled to the 
user based upon a request from the user and that sends 
the LT to the sever terminal 200a; and the user terminal 
200a includes a communication unit that receives the 
LT sent from the server 1 00 and a license Information 
processing unit 260 that controls usage of the content 
according to the usage right indicated on the received 
LT. 
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Description 

BACKGROUND OF THE INVENTION 

(1) Field of the Invention 

[0001] The present invention relates to a system and 
method which manage a digital content such as music 
and videos distributed via communications or broad- 
casting, and especially relates to a technique that is per- 
formed in a simple and assured manner to manage 
rights of the content and to control over the usage of the 
content such as to restrict the number of times to repro- 
duce the content, etc. 

(2) Description of the Prior Art 

[0002] In recent years, systems that distribute some 
digital productions such as music, videos and games via 
the Internet or digital broadcasting have been devel- 
oped and a part of them is now in a phase for practical 
use. For distributing these contents, the methodology of 
right management and usage control (DRM: Digital 
Rights Management), which restricts the numbers of re- 
production (play/playback), moving and copying for the 
distributed content, have also been examined from a 
viewpoint of copyrights protection, etc. 
[0003] The conventional digital content distribution 
systems, as seen In the Japanese Laid-Open Patent Ap- 
plication Nos.2000-48076 and 2000-293439, have been 
modeled to distribute a usage rule of the content for 
each user together with the content itself to a recipient 
side to make everything be managed by a user terminal 
side. 

[0004] For example, in case a user wants to purchase 
a right to see the movie "Matrix" three times, the user 
terminal receives the content of the movie together with 
its usage rule indicating, "Matrix can be viewed three 
times" via communication from a distribution server, and 
the reproduction of the content Is under the manage- 
ment according to the rule. 

[0005] Once the abovementioned rules are sent to the 
user terminal, the distribution server is no longer in- 
volved with the usage rule of the user 
[0006] When "Matrix" is viewed by reproducing the 
content stored at the usertemninal, a process to reduce 
by one is executed for each view from the number of 
views allowed In the usage rules managed by the tenni- 
nal. Then, a process is executed to prohibit any views 
when the number of views pennitted becomes zero. 
[0007] Fig. 1 shows a structure of the conventional 
digital content distribution system. 
[0008] A distribution sen/er 1000 is equipped with a 
user management database 1001 that stores ID infor- 
mation, etc. of the users registered as a member, a con- 
tent information database 1 003 that stores a content key 
to encrypt the content and usage rules of content, a con- 
tent database 1 006 that stores a content, a user authen- 



tication unit 1002 that executes user authentication, a 
content infomriation generation unit 1 004 that generates 
content information including usage rules of content and 
information of a content key, a content encryption unit 
5 1 005 that encrypts the content information by the user's 
unique information such as a user ID, etc., a content ac- 
quisition unit 1007 that acquires the content specified 
from the content database 1006, a content Information 
encryption unit 1008 that encrypts the content with the 
10 content key and a communication unit 1009 that com- 
municates with a user terminal 2000. 
[0009] On the other hand, the user temriinal 2000 is 
equipped with a communication unit 2001 that commu- 
nicates with the distribution server 1000, an ID informa- 

f5 tion storage unit 2002 that stores ID Information, a stor- 
age unit 2003 (HDD) that stores the content encrypted, 
a content infomiation decryption unit 2006 that decrypts 
the content key and usage rules from the content infor- 
mation received, a usage rule management unit 2007 

20 that manages the usage rules and the content key of the 
content, a usage rule processing unit 2008 that process- 
es the usage rules when the content is reproduced, a 
content decryption unit 2005 that decrypts the content 
by the content key acquired from the usage rule 

25 processing unit 2008 when the rules are met, and an 
external media access unit 2004 that outputs the con- 
tent to an external media 5000. 

[0010] Fig. 2 shows a process flow for the case the 
usertemninal 2000 purchases the content from the dis- 
30 tribution server 1000 in this digital content distribution 
system. 

[001 1 ] When a user requests to purchase the content, 
the communication unit 2001 in the user terminal 2000 
acquires ID information of the usertenrilna! 2000 which 

35 Is stored in the ID information storage unit 2002, and 
sends this ID infomiation with the content purchase re- 
quest to the distribution server 1 000 (SI 001 ). 
[0012] The user authentication unit 1002 receiving 
this infomriation through the communication unit 1009 

40 on the distribution server 1 000 collates it with the ID in- 
formation stored in the user management database 
1001 to execute user authentication, and then passes 
the content purchase request to the content information 
generation unit 1004 (SI 002). 

45 [0013] The content information generation unit 1004 
executes a billing process for the content purchase, ac- 
quires the usage mle and the content key infomriation of 
the purchased content from the content Infomriation da- 
tabase 1 003, and then passes the content key with the 

50 information of the purchased content to the content ac- 
quisition unit 1007. Also, the content infomiation includ- 
ing information of the usage rule and content key is gen- 
erated and passed to the content infomiation encryption 
unit 1005, and then the content information encryption 

55 unit 1 005 encrypts the content information (SI 003). 
[0014] The content acquisition unit 1 007 acquires the 
relevant content from the content database 1006, and 
the content encryption unit 1008 encrypts this content 
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by the content key (S1004). 
[0015] The communication unit 1009 on the distribu- 
tion server 1 000 sends the encrypted content and the 
encrypted content information to the user terminal 2000. 
[0016] The communication unit 2001 in the user ter- 5 
minal 2000 receives the encrypted content and the en- 
crypted content information including the content key 
and usage rule Information (S1 005), and sends the con- 
tent to the storage unit 2003 to be stored (S1006). 
[001 7] The content information is also sent to the con- io 
tent information decryption unit 2006. The content infor- 
mation decryption unit 2006 decrypts the encrypted con- 
tent information, takes out the content key and usage 
rule, and stores them in the usage rule management unit 
2007(31007). 15 
[0018] Fig. 3 shows a process flow for the case the 
user terminal 2000 reproduces the content in this digital 
content distribution system. 

[001 9] When the user requests to reproduce the con- 
tent, the usage rule processing unit 2008 acquires the 20 
usage rules and content key for the relevant content be- 
ing managed in the usage rule management unit 2007 

(52001) and checks the number of reproduction (how 
many times it allows to reproduce) in the usage rule 

(52002) . 25 
[0020] If the number of reproduction is bigger than ze- 
ro (S2003), the number of reproduction in the usage rule 

is decremented (S2004) and the usage rule and the con- 
tent key are stored In the usage rule management unit 
2007 (S2005). 30 
[0021] The content decryption unit 2005 acquires the 
relevant content from the storage unit 2003 (S2006), de- 
crypts the content by the content key provided from the 
usage rule processing unit 2008, and reproduces the 
content (S2007). 35 
[0022] When the number of reproduction is not bigger 
than 0 in Step S2003, it temninates the reproduction 
process. 

[0023] The image/sound reproduced in the content 
are output from the content decryption unit 2005. Also, 40 
if the content is moved out or copied to the external me- 
dia 5000, the image/sound of the content are output to 
the external media 5000 via the extemal media access 
unit 2004. 

[0024] In order to avoid any leaks of confidential in- 45 
formation, the ID information storage unit 2002, the con- 
tent infomnation decryption unit 2006 and the usage rule 
management unit 2007 that handle the confidential in- 
formation are generally realized in a security module 
such as an IC card, and this security module is loaded 50 
to the user terminal 2000. 

[0025] In this case, when the information of the usage 
rule and content key is transfen^ed to the usage rule 
processing unit 2008 from the usage rule management 
unit 2007, these infonnation is encrypted and output 55 
from the security module. Then, the usage rule process- 
ing unit 2008 decrypts these information to use. In ad- 
dition, when the usage rule updated by the usage rule 
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processing unit 2008 is stored in the usage rule man- 
agement unit 2007, it is encrypted once again for send- 
ing out to the security module. 

[0028] In the conventional digital content distribution 
system, the usage rule of the content for each user is 
managed in such a way by the user terminal side. 
[0027] However, when the usage rules for each user 
are managed at the user terminal, there are problems 
as follow. 

(1) A complex management scheme of the usage 
rule is necessary for the user terminal so that it may 
require having high loaded functions on the user ter- 
minal. 

(2) Since the distribution server is not involved with 
any usage and right management processes for the 
distributed content at all, it is unable to track the con- 
tent and detect when the content has been copied 
to what media even if the content is copied or the 
like happens on the user terminal. 

(3) When the storage mechanism (HDD) in the user 
terminal is crashed, it is difficult to restore the usage 
rule, etc. (Because there is no means other than the 
user terminal to maintain the information.) 

(4) For those cases to perform service such as to 
make the number of reproduction +1 automatically 
In the usage rule for a previously purchased content 
if any new content is purchased, or to add a new 
usage rule, etc., it becomes necessary to change 
both hardware and software on the distribution 
server and user temiinal. Therefore, it is actually dif- 
ficult to perform the processes for such service to 
expand some usage rule or to add a new rule. 

Additionally, It may also be possible to consider 
a model, which makes all of each user's usage rule 
be managed at the distribution server side, and 
makes the user terminal, without having any control 
over the usage rule, acquire the content itself (or 
possibly the content key only if the content is en- 
crypted) from the distribution server via communi- 
cation each time it Is viewed. However, in such a 
case, there is a problem as follows. 

(5) Since there is no control over the use of the con- 
tent after the content has been handed over to the 
user terminal, the user terminal can use the content 
without any limitation (especially, reproduction). 

SUMMARY OF THE INVENTION 

[0028] The present invention is available to solve 
these conventional problems, aiming at providing a con- 
tent usage management system and content manage- 
ment methods, etc. that make the server control usage 
of a content in a user terminal in a simple and assured 
manner without giving any extra loads of process onto 
the user terminal. 

[0029] In order to achieve abovementioned object, 
the content usage management system related to the 
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present invention includes a terminal device that uses 
a content as a digital production, and a server device 
that manages usage of the content on the terminal de- 
vice via a transmission line, wherein the server device 
includes a right information memory unit operable to 5 
memorize right information related to a usage right of 
the content entitled to a user who uses the terminal de- 
vice, and a license ticket issuance unit operable to gen- 
erate a license ticket based on a request from a user as 
right infonnation that indicates a part of the usage right 10 
entitled to the user and to send the license ticket to the 
terminal device; and the terminal device includes a re- 
ceiving unit operable to receive the Ibense ticket sent 
from the server device, and a content usage control unit 
operable to control usage of the content according to is 
the usage right indicated on the received license ticket. 
[0030] In this specification, "usage (use)" of a content 
includes all operations for using the content such as "re- 
production (play)", "moving", "copying" of the content, 
"printing" of the content for an electronic book, and even 
further includes pre-actions for these operations such 
as downloading of "license infonnation" (i.e. to down- 
load a license ticket in advance). 
[0031] In the content usage management system 
composed in such a way, the license ticket issuance unit 25 
generates the license ticket as right information indicat- 
ing a part of the usage right entitled to the user and 
sends the license ticket to the terminal device. Also, the 
content usage control unit in the terminal device controls 
the usage of the content according to the usage right 30 
indicated on the received license ticket. 
[0032] Therefore, it is not necessary for the tenninal 
device to manage the entire usage right entitled to the 
user, and usage of the content can be controlled just by 
managing a part of the usage right entitled to the user 35 
that is shown on the license ticket, and thereby remark- 
ably reduces a load of process required for the manage- 
ment by the tenninal device. Additionally, the server de- 
vice can grasp a status of content usage on each termi- 
nal in accordance with the license ticket issuance. When 40 
the content is copied at the terminal device, it is possible, 
by making a query to the server device for a copying 
permission, to detect when the copy was taken to what 
medium and to keep track of the content. Also, because 
the server device holds the usage right entitled to the 45 
user, it is easy to restore usage rules, etc. of the user 
when a storage unit (HDD) on the terminal device is 
crashed. It also makes it easy to execute a process for 
adding some extra usage rule or for providing some 
service to expand a usage rule, for example, adding 1 so 
to the number of reproduction in the usage rule of the 
content. Furthermore, since the content usage control 
unit on the tenninal device controls usage of the content 
according to a usage right indicated on the received li- 
cense ticket, it assures to prevent the content from being ss 
used unlimitedly by the terminal device. 
[0033] Herein the license ticket issuance unit acquires 
a request from the user that specifies a part of the usage 
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right entitled to the user, generates a license ticket cor- 
responding to the request, and sends the license ticket 
to the terminal device. It can also be featured to gener- 
ate a license ticket that indicates a minimum unit of a 
usage right included in the usage right entitled to the 
user, and to send the license ticket to the terminal de- 
vice. In such a structure, it is possible to grasp a status 
of usage for the content on each terminal device in a 
detailed level, and to minimize the load of process re- 
quired for managing the usage right on the each terminal 
device. 

[0034] In addition, the license ticket may be in a struc- 
ture that includes detective infonnation to detect wheth- 
er any detail of the license ticket has been altered. Be- 
cause of this, it ensures to prevent any alterations on 
the license ticket. 

[0035] The present invention is not only realized as 
above content usage system, but also realized as a 
server device and as a terminal device, which composes 
the system. The invention may also be realized as a con- 
tent usage management method using characteristic 
means that realize the server device and the terminal 
device as program steps. Additionally, it may be realized 
even as a program that makes a personal computer etc. 
to execute these steps. It may be unnecessary to men- 
tion, b-:: the program can be distributed extensively via 
transmission media such as the Internet, recordable 
media (e.g. DVD) and so on. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0036] These and other objects, advantages and fea- 
tures of the invention will become apparent from the fol- 
lowing description thereof taken in conjunction with the 
accompanying drawings that illustrate a specific embod- 
iment of the invention. In the Drawings: 

Fig.1 is a block diagram that shows a structure of 
the conventional digital content distribution system. 
Fig. 2 is a flow chart that shows the process when 
content is purchased in the conventional digital con- 
tent distribution system. 

Fig. 3 is a flow chart that shows the process when 
content is reproduced in the conventional digital 
content distribution system. 
Fig. 4 is a diagram that shows an overall structure 
of the content usage management system 1 related 
to the present embodiment. 
Fig. 5 is a functional block diagram that shows struc- 
tures of the server ICQ and the user terminals 
2003-2000 described in Fig. 4. 
Fig. 6 is a diagram that shows a structure sample 
of the user management table 111 described in Fig. 
5. 

Fig. 7 is a diagram that shows a structure sample 
of the user right infonnation management table 1 21 
described in Fig. 5. 

Fig. 8 is a diagram that shows a structure sample 
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of the license information described in Fig. 5. 
Fig. 9 is a diagrann that shows a LT data form struc- 
ture generated by the content Information genera- 
tion unit 170. 

Fig. 1 0 is a flow chart that shows a process respec- 
tively executed on the user terminal 200a and serv- 
er 100 when the user purchases the content 
through this system. 

Fig. 11 is a diagram that shows a content purchase 

screen (1). 

Fig. 1 2 is a diagram that shows a content purchase 
screen (2). 

Fig. 1 3 is a flow chart that shows a process respec- 
tively executed on the user terminal 200a and serv- 
er 1 00 when the user utilizes the content in this sys- 
tem. 

Fig. 1 4 is a diagram that shows a using content se- 
lection screen. 

Fig. 1 5 is a diagram that shows a content usage re- 
quest screen. 

Fig. 16 is a diagram that shows a relationship be- 
tween the usage rules extracted and distributed to 
the user terminal and fluctuations in the usage rules 
managed by the server. 

Fig. 17 is a diagram that shows a relationship be- 
tween the usage rule pemnitting to use once and its 
usage duration. 

Fig. 1 8 is a flow chart that shows a process execut- 
ed by the user terminal 200a for a case the content 
or LT is moved out to some external media in this 
system. 

Fig. 19 is a diagram that shows a moving content 
selection screen. 

DESCRIPTION OF THE PREFERRED 
EMBODIMENTS z 

[0037] The following is a detailed explanation of em- 
bodiments for the present invention with reference to fig- 
ures. 

[0038] Fig. 4 is a diagram that shows an overall struc- 
ture of the content usage management system 1 related 
to this embodiment. 

[0039] In this content usage management system 1 , 
usage rights (license) for each content, which are as- 
signed to a user who purchases the digitized content 
such as music, videos and books, are managed mainly 
at a center side in a dynamic way, and a license ticket 
(hereinafter also referred to as "LP') is distributed based 
upon a request from the user which makes the content 
available to use within a scope of usage rules included 
in the LT, so as to protect copyrights of the content by 
the system. The system includes a server 100 located 
at a center, user terminals 200a to 200c of the users who 
use the content and a communication network 300 that 
connects these elements. 

[0040] The server 1 00 is a computer such as a work- 
station and functions as a user management server, 



content distribution server, billing server, and license 
management server. To be more specific, the server 1 00 
manages the user who joins to this system 1 and the 
terminal owned by him, accepts any purchase of the 

5 content from the user terminals 200a to 200c, holds a 
web page that accepts any requests to issue a license 
ticket (hereinafter also referred to as "LT issuance re- 
quest") from the user tenninals 200a to 200c, etc., bills 
based upon the content purchase request coming from 

10 the user terminals 200a to 200c, distributes the encrypt- 
ed content to the user terminals 200a to 200c and also 
distributes LT to use the encrypted content at the user 
tenninals 200a to 200c according to the LT issuance re- 
quest. This LT includes a content key to decrypt the en- 

15 crypted content and the extracted usage rules taken out 
partially from the usage rights (license) for the content 
granted to the user. 

[0041 ] The user tenninals 200a to 200c are the com- 
puter device such as a personal computer, mobile infor- 
20 mation terminal, digital television receiver and functions 
as a client for the server 100. Specifically, the user ter- 
minals 200a to 200c access the web page on the server 
100 according to the user's operation by using tools 
such as the Internet browser software, send the content 
purchase request and receive the content distributed, 
send the LT issuance request for using the content and 
receive the LT, and reproduce the content within a scope 
of the extracted usage rules on LT 
[0042] It is possible to attach an external media 500b 
for the user terminal 200b (for example, an SD card) and 
an external media 500c for the user tenninal 200c (for 
example,, an IC card) to the user terminal 200a, and is 
structured to be capable of copying and moving the con- 
tent and LT held by the user tenninal 200a to the external 
media 500b and 500c, and reproducing the content on 
the user terminals 200b and 200c. 
[0043] The communfcation network 300 is the com- 
munication media provide by some wire communica- 
tions such as the Internet and CATV and wireless com- 
munications such as digital broadcasting. 
[0044] Fig. 5 is a functional block diagram that indi- 
cates structures of the server 100 and user tenninals 
200a to 200c shown in Fig. 4. Since the functional struc- 
ture in the user terminals 200a to 200c is identical, the 
usertemninal 200a represents all in the figure. The com- 
munication network 300 is also shown in the figure. 
[0045] The server 1 00 is roughly comprised of a data 
unit (a user management DB 1 1 0, user right information 
DB 120, content information DB 130, and content DB 
140) which is realized by the data file, etc. stored in the 
hard disk, etc., a processing unit (a user authentication 
unit 150, user right processing unit 160. license infor- 
mation generation unit 165, content information gener- 
ation unit 170, content information encryption unit 175, 
content acquisition unit 180, content encryption unit 
185, and communication unit 190) which is realized by 
the hardware such as CPU, RAM, ROM, etc., and the 
program, etc. executed from CPU. 
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[0046] The user management DB 11 0 stores the user 
information, etc. of the user registered as a member to 
this content usage management system 1 . To be more 
specific, in order to put the user rights under its man- 
agement, the user management DB 11 0 uses an unique 5 
client ID (temriinal ID) assigned by the user tenninai to 
associate the rights to the user infomiation including the 
user ID. It is a memory unit to memorize multiple user 
management tables 11 1 to register and manage the cli- 
ent ID of the user terminal owned by the user who has io 
registered as a member, the unique ID information as- 
signed to the user and the user Information of the user. 
[0047] The user right Information DB 120 stores the 
user right (license) infomiation for the content. To be 
specific, the user right information DB 120 is a memory is 
unit to memorize multiple user right information man- 
agement tables 121 to manage the content purchased 
by the user and the remaining usage rights (license) en- 
titled to the user for the content per each usage aspect. 
(For example, reproduction, moving, copying, printing, 20 
usage duration, etc.) 

[0048] The content information DB 1 30 stores related 
information of the content (such as a content key). To 
put it concretely, the content infonnatlon DB 130 holds 
multiple content keys 131 that encrypts the content, a 25 
content key table 132 that records a correlation between 
the content key 131 and the content ID, and so on. 
[0049] The content DB 140 stores the content. To be 
more specific, the content DB 1 40 stores and holds mul- 
tiple contents 141 and a content table 142 that records 30 
a correlation between the content and the content ID. 
[0050] The user authentication unit 1 50 authenticates 
the user. Specifically, the user authentication unit 150 
uses the user management table 111 to specify the 
rights managed on the server and a user ID from the ID 35 
infomnation (client ID) contained in the content purchase 
request and the LT issuance request received from the 
user temriinals 200a to 200c. The user authentication 
unit 150 may update the user information in the user 
management table 111 if a user's address, etc. are 40 
changed, and may add the client ID to the user manage- 
ment table 111 if some user's terminal device is pur- 
chased. 

[0051] The user right processing unit 1 60 registers the 
user right information for the content according to the 45 
purchase requests and updates the right infomnation ac- 
cording to the usage requests. To be specific, after a 
billing process is executed according to the content pur- 
chase request, the user right processing unit 1 60 regis- 
ters the rights of the user to the user right information so 
management table 121 in the user right infomiation DB 
120. 

[0052] Since the billing process itself is not a nature 
of the present invention, the part of the billing process 
is not described in the figure. Also, when the user right S5 
is registered, an initial value set by the content provider 
as UR-Us (Usage Rule for User on server) which is the 
user right information managed on the server is as- 



signed. Additionally, when there is a LT issuance re- 
quest, the user right processing unit 160 confirms 
whether it is possible to extract the usage right UR-Uc 
(Usage Rulefor User on client) from the right Information 
UR-Us at that point to the user or not. And, once it is 
confirmed, it passes the requested usage right UR-Us 
tothe license infomnation generation unit 165. and at the 
same time, updates a right infomiation UR-Us managed 
on the server with the details decremented for the ex- 
tracted UR-Uc. Furthemiore, if there is a notification to 
change the right infomiation from the content provider, 
for example, if there is a notification to add some extra 
numbers of usages or to extend the usage duration as 
a complimentary service to the content buyers, the user 
right processing unit 160 updates the license informa- 
tion evenly for each buyer. 

[0053] The license information generation unit 165 
generates the usage rights of the content and license 
Information requested. 

[0054] The content information generation unit 170 
acquires the content key from the content information 
DB 130 and generates the content Infomiation (LT) that 
includes the license information provided from the li- 
cense infomiation generation unit 165 and the content 
key information acquired. To be more specific, the con- 
tent infomnation generation unit 170 acquires the con- 
tent key 130 con-esponding to the content ID by access 
the content information DB 130 with the content key ta- 
ble 132, and generates LT which Includes this content 
key, the extracted usage rule (UR-Uc) and the license 
information provided from the license information gen- 
eration unit 165. 

[0055] The content information encryption unit 175 
encrypts the content Infomnation. 
[0056] Specifically, when the content key and footer 
on LTare added, the content infomiation encryption unit 
175 encrypts this footer if needed. This encryption, for 
example, encrypts the object by the temninal ID (client 
ID) of the user terminals 200a to 200c, which has made 
a request to issue LT. In such a way of the encryption 
handled by the client ID, LT can be bound to the user 
terminal holding the client ID. 

[0057] Using public key cryptography, It may be en- 
crypted by the public key of the user. It may also be en- 
crypted with a secret key shared between the server and 
the terminal. 

[0058] Also, SAC (Secure Authenticated Channel) in 
a con'elated authentrcation such as SSL (Secure Sock- 
ets Layer) is formed between the server 100 and the 
user terminals 200a to 200c, and if a secure communi- 
cation channel is assured between the server and the 
terminals, the encryption of the license Information Is op- 
tional (not mandatory). However, In this embodiment, 
the explanation Is given based on the premise that the 
content information encryption unit 1 76 executes the LT 
encryption process and that SAC is generated with the 
server terminals. 

[0059] The content acquisition unit 180 acquires the 
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specified content from the content DB 140. To be more 
specific, the content acquisition unit 180 refers to the 
content table 142 in the content DB 140 and acquires 
the content 141 , which corresponds to the content ID, 
and passes it to the content encryption unit 185. 
[0060] The content encryption unit 185 encrypts the 
content. To put it concretely, the content encryption unit 
1 85 encrypts the content provided from the content en- 
cryption unit 185. The content key handles this encryp- 
tion. 

[0061] A communication unit 190 communicates with 
the user terminal 200. To be more specific, the commu- 
nication unit 1 90 is a communication Interface, which is 
realized by scripts, programs, etc. stated on the web 
page that communicates with the user terminals 200a 
to 200c via the communication network 300. It analyzes 
commands and messages sent from the usertemninals 
200a to 200c, and based upon the result, may request 
a process to the user authentication 1 50, distributes the 
content provided from the content encryption unit 185 
to the user terminals 200a to 200c, distributes LT pro- 
vided from the content infomnation encryption unit 175 
to the user terminals 200a to 200c, and then generates 
SAC with the server 

[0062] On the other hand, the user terminal 200 is 
equipped with a communication unit 21 0, operation unit 
220, ID infonnation storage unit 230, content storage 
unit 240, LT storage unit 245, content information de- 
cryption unit 250, license infonnation processing unit 
260, content decryption unit 270 and external media ac- 
cess unit 280. 

[0063] The communication unit 210 communicates 
with the sen/er 100. To be more specific, the communi- 
cation unit 210 is a communication interface, which 
communicates with the server 100 via the communica- 
tion network 300 using the browser software, etc. It 
sends a message for the content purchase request and 
for the LT Issuance request according to the request 
from the operation unit 220 , stores the content sent from 
the server 100 to the content storage unit 240, stores 
LT to the LT storage unit 245, and generates SAC with 
the communication unit 190 on the server 100. 
[0064] The operation unit 220 Is a user interface, 
which accepts user's operations, and displays the web 
page provided by the server 1 00, and so on. 
[0065] The ID information storage unit 230 stores ID 
information (client ID) of the terminal. To be more spe- 
cific, the ID information storage unit 230 stores and 
holds the unique client I D previously embedded for each 
terminal. Also, the ID infonnation storage unit 230 may 
hold the public and private keys in the public key cryp- 
tography for encrypting LT, or the secret key in the 
shared key encryption method. 

[0066] The content storage unit 240 is comprised of, 
for example, HDD, etc., and stores the encrypted con- 
tent. 

[0067] The LT storage unit 245 stores LT sent from 
the communication unit 210. 



[0068] The content information decryption unit 250 
decrypts the content key and license information from 
the received content information (LT). To be more spe- 
cific, the content Information decryption unit 250 de- 

5 crypts the content key, etc. included in LT stored in the 
LT storage unit 245 by using the client ID, the private 
key in the public key cryptography, or the secret key in 
the shared key encryption method. 
[0069] The license information processing unit 260 

10 identifies whether the content key can be used based 
on the license information or not. To be more specific, 
the license information processing unit 260 decides if 
the reproduction is possible. If possible, It passes the 
content key to the content decryption unit 270 and mon- 

15 itors that the reproduction process for the content han- 
dled by the content decryption unit 270 follows the ex- 
tracted usage rules. 

^. [0070] The content decryption unit 270 decrypts the 
content encrypted by the content key acquired from the 
20 license information processing unit 260. Specifically, the 
content decryption unit 270 decrypts the encrypted con- 
tent with the content key provided from the license in- 
formation processing unit 260 and reproduces the con- 
tent under the management of the license information 
25 processing unit 260, 

[0071 ] The external media access unit 280 outputs ei- 
ther the content or LT or both to the externa! media 500b 
or the external media 500c. 

[0072] The abovementioned ID infonnation storage 

30 unit 230, LT storage unit 245, content information de- 
cryption unit 250 and license information processing unit 
260 are located in a secure module of which hardware 
is tamper-resistant, for instance, an IC card having a 
built-in micro chip. In this case, the decryption of the en- 

35 crypted license information and the process for the li- 
cense infonnation may take place in the security mod- 
ule. However, since the encryption of the license infor- 
mation is optional if LT is acquired from the server in a 
situation where SAC has been established, the decryp- 

40 tion process is executed only for the case the license 
Information has been encrypted. Therefore, it is a stout 
design against any fierce physical attacks to steal these 
confidential infonnation, and makes it impossible for any 
external entity to illegally access the client ID, content 

45 key contained in LT, usage rules and any critical & con- 
fidential infonnation in the light of copyright protection. 
The security module herein may be the tamper-resistant 
software. Also, the license infonnation processing unit 
260 may be located in a secure place of the user termi- 

50 nal. 

[0073] In the content usage management system 1 
structured in this way, the right infonnation of each user 
forthe content is all managed basically at the distribution 
side. The content purchased (or pre-contracted) by the 
55 user is encrypted and stored in the content storage unit 
240 of the user terminal 200a. If the content stored on 
the user terminal 200 is reproduced, moved and copied, 
the request and LT issuance request messages are out- 
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put on the server 100 from the user terminal 200. The 
server 100 confirms the usage rule (or contract) UR-Us 
for the content requested by the user, and if there are 
usage rights of the user, it distributes the content infor- 
mation and LT that includes "license infonnatlon" and 
the content key to the user. The license information Is 
comprised of enable/disable information for reproduc- 
tion, moving and copying of the content and the user 
terminal uses the content In the way pemiltted In the li- 
cense information. 

[0074] If the user acquires an individual content 
through the purchase, etc.. the usage rule regarding the 
content acquired by the user Is put under the manage- 
ment of the user right infonnation DB 120 on the server 
100. This type is called as a pay per use model. This 
system is also applicable to other models such as a sub- 
scribed (pre-contracted) model. The subscribed model 
has the formation similar to a tier payment (billing) ap- 
plied In the broadcasting of which billing system allows 
all of the programs in the pertinent channel be seen once 
a channel contract is signed. In this case, the user right 
infomnation DB 120 retains the contract information as 
the user right information. 

[0075] Fig. 6 is a diagram to show a configuration 
sample of the user management table 111 described in 
Fig. 5. 

[0076] This user management table 1 1 1 is comprised 
of the user ID assigned to the user who has become a 
member of this content usage management system 1 , 
the user information ("Name", "Address", "Tel No.1 ", 'Tel 
No.2", "E-mail 1", "E-mail 2"...), associated with this 
user ID, the client ID ("Client ID 1 "Client ID 2", "Client 
ID 3"...) that is pre-asslgned to the user temnlnal used 
by this user in the content usage management system 
1 . By means of the user management table 1 1 1 struc- 
tured in this way, once the client ID is identified, the user 
ID of the user who owns the terminal device having of 
a particular client ID can be specified. 
[0077] Fig. 7 is a diagram that shows a configuration 
sample of the user right information management table 
121 described in Fig. 5. 

[0078] This user right information management table 
121 Is set by the client ID or user ID and the content ID 
of the content purchased by the user and the content 
ID, and comprised of the ID of the user's usage rights 
(UR-Us) managed by the server and the remaining in- 
formation set per each usage scheme of the usage 
rights (license) entitled to the user. The remaining Infor- 
mation set per each usage scheme indicates respec- 
tively that; how many times each user can still repro- 
duce, move, copy the content purchased, how long he 
can use it, how many printouts he can make, etc. Also, 
the maximum continuous usage duration set and at- 
tached to the remaining information shows the maxi- 
mum length of times allowed to use the content consec- 
utively for the reproduction process, etc., a count deci- 
sion threshold value indicates the time duration counting 
the content usage as once, and an accumulated usage 



duration shows the accumulative time duration that the 
content can be used. 

[0079] In the details of usage rights, an initial value is 
pre-defined for each of the contents by the content pro- 
5 vider and the server manager according to the content's 
attributes, and the initial value is assigned as the re- 
maining information of the license at the time of the con- 
tent purchase. Even for the same content, if the sales 
are in the style of having different prices depended on 
10 the usage rules acquired by the user, the initial value 
may be different according to the purchase price. Then, 
the remaining infonnation of the license may be decre- 
mented accordingly from the initial value for each of the 
usage rules and license information extracted based up- 
on the user's LT issuance request, or may be increment- 
ed by a request of the content provider's service offer. 
[0080] Although this user right infonnation manage- 
ment table 121 manages the usage right by the user ID, 
it may also manage the right by the client ID. 
[0081] Fig. 8 is a diagram to show a configuration 
sample of the license information described In Fig. 5. 
[0082] This license information is generated with the 
extracted usage right, for example, the infonnation of 
minimum usage rule elements in the usage rules, and 
is comprised of one or multiple enable/disable informa- 
tion regarding the use of the content. Each of the enable/ 
disable infomnation is structured only from a parameter 
that shows Yes/No. a In Fig. 8 indicates enable/disable 
information for an action of reproduction, p indicates en- 
able/disable Infonnation for an action of moving, and y 
indicates enable/disable for an action of copying. The 
type and the number of the enable/disable infonnation 
depend on the attributes of the content's. 
[0083] Although the case of the minimum usage right 
has been explained here, if the user makes a request, 
it is allowed to generate as many extracted usage rights 
as requested, i.e. not only the enable/disable informa- 
tion, but also it is allowed to generate the license Infor- 
mation which includes the usage rules for multiple num- 
bers of times. Fig. 8 also shows a sample that a piece 
of license infonnation is composed of a rule for multiple 
use of the content; however, it is also possible to struc- 
ture each component of the license information as Inde- 
pendent information, and multiple components are 
bound and handled as license infonnation for one con- 
tent. 

[0084] Fig. 9 is a diagram to show a data format struc- 
ture of the content information and LT generated by the 
content information generation unit 170. 
[0085] LT 600 generated by the content infonnation 
generation unit 170 is comprised of the LT header 610 
and license infonnation, I.e. an action as the operating 
details of the content, one or more LT action tag block 
(s) 620#1 ~620#n to show the rules, etc. for the action, 
LT content key tag block 630 and LT footer 640. 
[0086] The LT header 61 0 is comprised of a LT Iden- 
tifier 61 1 that shows this data is the license ticket han- 
dled In the content usage management system 1 , ver- 
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sion number 612 that shows the version of specifica- 
tions defined in the content usage management system 
1 , LT size 61 3 that shows data size of the entire LT, con- 
tent ID 614 that shows a content ID of the content as- 
sociated with this LT, UR-Us ID 61 5 that shows an ID of 5 
UR-Us originated this LT issuance, starting time 61 6 for 
a LT effective period that shows the date and time when 
this LT becomes effective, ending time 617 for the LT 
effective period that shows the date and tinne when this 
LT becomes ineffective, LT moving pemiission flag 618 io 
that shows if moving the content or LT is allowed from 
one user temninal to some external media or another us- 
er terminal, and LT encryption method 61 9 that shows 
an encryption method (DES, AES, etc.) applied to the 
LT content key tag block 630 and LT footer 640. is 
[0087] The LT action tag blocks 620#1~620#n are 
comprised of the action ID 621 that shows the ID to 
specify the action details for the content, the maximum 
continuous usage duration 622 that shows the maxi- 
mum length of time to operate the content consecutively, 20 
the count decision threshold value 623 that indicates as 
the time duration counting the content operation as 
once, a number counter 624 that shows the maximum 
number of operations for the content with this LT, and 
the accumulated usage duration 625 that shows the ac- 25 
cumulative time duration that the content can be used. 
Regarding the maximum continuous usage duration, for 
example, even though the content Is a 2 hours-long 
movie and you have to suspend (pause) its reproduction 
for some reason such as going to a bathroom, it is usu- 30 
ally set longer than 2 hours (for instance, 4 hours). The 
accumulated usage duration is used to have more strict 
control over the usage than the maximum continuous 
usage duration, and usually set longer than 2 hours, but 
shorter than the maximum continuous usage duration 35 
(for instance, 3 hours). 

[0088] If the count decision threshold value 623 is "0", 
It counts as once when the content operation (usage) is 
started on the user terminal 200a. And if certain time 
duration is specified to the value, it counts as once when 40 
It reaches the duration. Also the value set in the number 
counter 624 Is subtracted every time the operation of 
the content takes place. However, If the count decision 
threshold value is effective (if it is not "0"), it is only sub- 
tracted at the point when the consecutive operation time 45 
of the content reaches the value in the count decision 
threshold value. Also the subtraction of the number 
counter is done only during the consecutive operation. 
Additionally, the time durations set for the maximum 
continuous usage duration 622 and for the accumulated so 
usage duration are subtracted in accordance with the 
operation time of the content. The time duration set for 
the maximum continuous usage duration 622 Is sub- 
tracted even during the pause, whereas the subtraction 
is stopped during the pause for the time duration set in 55 
the accumulated usage duration 625. It shows enable If 
the value in the number counter 624 is 1 or more, shows 
disable if 0, and shows the minimum usage rule if 1. 
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Therefore, the number counter 624 may also be used 
as the enable/disable information. 
[0089] In the LT content key tag block 630, the content 
key and the decryption key that decrypts the encryption 
of the content associated with this LT are stored. 
[0090] The LT footer 640 is an optional block that may 
or may not be attached. If attached, a hash value by 
SHA-1 algorithm Is stored to avoid any alterations on 
the LT header 610 to the part just before the LT footer 
640, which means the part up to the LT content key tag 
block 630. 

[0091] Although the content ID has been stored Into 
the LT header 610 on this LT 600, the content ID may 
be set as an identifier to associate the content informa- 
tion with the content, and thereby it may become impor- 
tant for making the content Information specified by the 
content ID acquired at the time of the content usage. In 
such a case, It may be stored In the tag block. 
[0092] Regarding the content usage management 
system 1 in the embodiment of the present Invention as 
structured above, the actions taken for the content pur- 
chase shall be explained below with references to the 
flow chart shown in Fig. 10. 

[0093] Fig. 1 0 is a flow chart, which shows processes 
executed respectively at the user terminal 200a and on 
the server 100 when a user purchases the content In 
this system. 

[0094] When the content is purchased, the user at the 
user terminal 200a operates the operation unit 220, ac- 
cesses a web page on the server 1 00, and calls up the 
content purchase screen (1) Indicated in Fig. 11. 
[0095] The content purchase screen (1) Is made up 
of an indication of categories which are available for a 
network purchase in this system such as "music", 
"games", "electronic books", "movies", ... , "paid TV pro- 
grams", a check box to select these categories, a "Next" 
button, a "Back" button, and so on. 
[0098] If the category of the content to be purchased 
is music, the user operates the operation unit 220, clicks 
on the check box corresponding to "music", and presses 
the "Next" button. This makes the content purchase 
screen (2) shown in Fig. 12 displayed. 
[0097] This content purchase screen (2) is comprised 
of the category, details of "content ID", "title", "right in- 
formation", "sales price" for the tracks belonging to mu- 
sic, a check box to select these tracks, a "Purchase" but- 
ton, a "Back" button, etc. The "right Infonnation " shows 
the original usage rules set by the content provider such 
as the initial value, number of reproduction, number of 
moving, number of copying, usage duration, etc. If the 
track to be purchased is "Surf-riding George", the user 
operates the operation unit 220, clicks on the check box 
con-esponding to "Surf-riding George", and presses the 
"Purchase" button to enter his content purchase re- 
quest. 

[0098] If there is a request made by the user to pur- 
chase the content, the communication unit 210 in the 
user terminal 200a generates SAC with the communi- 
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cation unit 190 on the server 100, then acquires the ID 
information (client ID) of the user terminal 200 that Is 
stored in the ID Information storage unit 230, and sends 
the content purchase request message including this ID 
infomnation to the server 100 (SI). This content pur- 
chase request message is comprised of, for example, a 
message ID that indicates the content purchase, the 
content ID of the content requested to be purchased, 
the client ID of the user terminal that requests the con- 
tent purchase. 

[0099] Once the user authentication unit 1 50 receives 
this information through the communication unit 1 90 on 
the server 100, It collates the received ID information 
with the ID information stored in the user management 
DB 1 1 0 for the user authentication , and passes th e con- 
tent purchase request to the user right processing unit 
160 (S2). To put It concretely, the user authentication 
unit 1 50 refers to the user management table 111, spec- 
ifies the user ID from the client ID, and then passes the 
user ID, the content ID, etc. as the content purchase re- 
quest to the user right processing unit 160. 
[01 00] After executing a billing process for the content 
purchase, the user right processing unit 160 registers 
the user's right information for the content purchase to 
the user right infomnation DB 120(S3), Specifically, the 
user right processing unit 1 60 specifies the user right 
information management table 121 (See Fig. 7) for the 
user (for example, East XX) who purchases the content 
from the user ID "pana 01" by access the user right in- 
formation DB 120. And then the user right processing 
unit 1 60 stores Track 1 respectively to a field of the con- 
tent ID on the user right infomriation management table 
121 and stores the ID, "right infomnation A" and Its de- 
tails of the right infonnation UR-Us for Track 1 respec- 
tively to fields of the license information per each content 
ID. Forthe details of this right Information A, the remain- 
ing information (Nos. of reproduction, moving and cop- 
ying, etc.) of the initial values set by the content provider 
is entered. Then, the user right processing unit 160 
passes the content ID to the content information gener- 
ation unit 170. 

[0101] The content information generation unit 170 
acquires the related Infonnation (such as the content 
key) of the concerned content from the content informa- 
tion DB 130 (S4). Specifically, the content infomnation 
generation unit 170 accesses the content information 
DB 130, acquires the content key 131 corresponding to 
the content ID with reference to the content key table 
132, and passes the acquired content key and the con- 
tent ID to the content acquisition unit 180. 
[0102] The content acquisition unit 180 acquires the 
concerned content from the content DB 140, and the 
content encryption unit 185 encrypts this content with 
the content key. To be more specific, the content acqui- 
sition unit 180 accesses the content DB 140 and ac- 
quires the content corresponding to the content ID with 
references to the content table 1 42, and passes the ac- 
quired content, the client ID, and the content key re- 



ceived from the content information generation unit 170 
to the content encryption unit 185. The content encryp- 
tion unit 185 encrypts the received content by the con- 
tent key and passes the encrypted content to the com- 
5 munication unit 1 90. The communication unit 1 90 on the 
server 100 sends the encrypted content to the user ter- 
minal 200 (S6). 

[0103] Once the encrypted content is received (S6), 
the communication unit 210 of the user terminal 200 
10 sends the content to the content storage unit 240 to have 
it stored (S7). 

[0104] Throughout these processes executed re- 
spectively in the user tennlnal 200a and on the server 
1 00, the session forthe content purchase Is completed. 
15 [01 05] Since SAC is generated between the user ter- 
minal 200a and the server 100 and the encrypted com- 
munication takes place with a shared session key within 
the session forthe content purchase session, it is pos- 
sible to prevent the content purchase request message 
20 from being exposed on the network. 

[0106] Fig. 1 3 is a flow chart to show the processes 
conducted respectively in the userterminal 200a and on 
the server 100 when the user uses the content in this 
system. 

[0107] If the content is used, the user at the user ter- 
minal 200a operates the operation unit 220 to display 
the using content selection screen shown in the Fig. 14. 
This using content selection screen is comprised of the 
title, content ID of the content purchased by the user at 
the user tenninal 200a, or a p re-application of the li- 
cense ticket for the content pre-contracted, etc. and 
check boxes for these contents, "Next" and "Back" but- 
tons, etc. 

[0108] If the content is used, the user operates the 
operation unit 220 and enters his usage infonnation of 
the content to be reproduced. To put it concretely, the 
user displays the using content selection screen as 
shown in Fig. 14, marks on the check box for the content 
he wants to reproduce (for example, Su rf-riding George) 
and clicks on the "Next" button. And then, he displays 
the content usage request screen as shown in Fig. 15. 
The content usage request screen is comprised of ac- 
tions available for this content, reproduction, moving 
and copying, check box to select the action, text box to 
enterthe number of actions, a "Decide" button, a "Back" 
button, etc. 

[0109] As a part of the entry forthe usage information, 
the user operates the operation unit 220, marks on the 
check box required forthe requesting details (in this par- 
ticular example, reproduction and moving) of the con- 
tent selected (Surf-riding George), enters the numbers 
of requests (In this particular example, "2 (twice)" for re- 
production and "1 (once)" for moving) in the text box for 
the requesting details being marked. 
[01 10] If the check box is marked, the text box is de- 
faulted to "1" as the minimum usage rule. Then if the 
user wants to use it "2 (twice)" or more, he can simply 
enter the number he wants in the text box. 
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[0111] If there is a content reproduction request from 
the user, the communication unit 21 0 in the userterminal 
200 generates SAC with the comnnunication unit 1 90 on 
the server 100, acquires the ID information (client ID) 
on the user temninal 200 stored in the ID infonmation 
storage unit 230, and then sends the LT issuance re- 
quest message including this ID information to the serv- 
er 100 (S11). This LT Issuance request message, for ex- 
ample, is comprised of the message ID that indicates 
the LT issuance request, content ID (for example, Track 
1) of the content to be used, content reproduction re- 
quest, i.e. the requesting information (Twice for repro- 
duction, once for moving) that Indicates the details of 
the content usage request and client ID (for example, 
natOI ) of the user terminal that requests to issue LT 
[0112] The user authentication unit 150 that receives 
this information via the communication unit 190 on the 
server 1 00 collates the ID information received with the 
ID information stored in the user management DB 110 
for user authentication and passes the user information 
and the content reproduction request to the user right 
processing unit 160 (S12). To be more specifically, the 
user authentication unit 150 refers to the user manage- 
ment table 111 , specifies the user ID from the client ID, 
and then passes the user ID, and the client ID, content 
ID, requesting infomiation, etc. as a request to repro- 
duce the content to the user right processing unit 160. 
[01 13] The user right processing unit 1 60 confirms the 
user right information for the content requested, which 
is registered to the user right infomiation DB 120 (SI 3). 
Specifically, the user right processing unit 160 accesses 
the user right information DB 1 20 and specifies the user 
right information management table 121 (See the Fig. 
7) for the user (for example, East XX) who uses the con- 
tent from the user ID "panaOl". Then, the user right 
processing unit 160 refers to Track 1 in the field of the 
content ID on the user right infomiation management 
table 121 , and confirms if reproduction and moving are 
still included in the remaining infomnation (UR-Us) of 
Track 1 , if numbers of reproduction and moving request- 
ed are still remaining in the information, and so on. 
[0114] In the case of a subscribed model (pre-con- 
tracted model), confinnation to the user right information 
is conducted by the validation in which subscription 
(contract) the requested content is included, and wheth- 
er the user holds the concerned subscription or not. 
[0115] When the right infomriation for reproducing the 
requested content is included in the registered right in- 
formation (S14), the user right processing unit 160 re- 
ports the enable/disable information of reproduction 
based on the right information to the license information 
generation unit 1 65, updates details of the right informa- 
tion for reproduction (decrements the number available 
for reproduction) and stores it to the user right Informa- 
tion DB 120 (SI 5). The license information generation 
unit 165 generates the license information based on the 
information provided from the user right processing unit 
1 60 and passes it to the content information generation 



unit 1 70 (S1 5). To be specific, the user right processing 
unit 160, as shown in Fig. 16, updates "10 times" for 
reproduction, 'Twice" for moving and "3 times" for cop- 
ying in the remaining information of the content ID for 
5 the user ID "panaOV to "8 times" for reproduction, 
"Once" for moving and "3 times" for copying. In other 
words, the usage rules (UR-Us) for reproduction are 
decremented from 1 0 times to 8 times and for moving 
from 3 times to Twice, and the license information gen- 

10 oration unit 165 passes the license infomnation of 
'Twice" for reproduction and "Once" for moving to the 
content information generation unit 170, and makes it 
send to the user terminal 200a as LT. 
[0116] At the discretion of the server side, it is also 

15 possible to send the usage right as LT, which is not met 
with the usage right requested from the user terminal. 
For example, even if the usertemriinal requests the right 
to reproduce the content twice, sending the reproduc- 
tion right for once as LT makes it possible to reserve the 

20 policy for sending the minimum usage right every time 
according to the business decision, etc. 
[0117] The content infomnation generation unit 170 
reads the content key Information for the relevant con- 
tent from the content information DB 1 30 and generates 

25 the content information (LT) that includes this content 
key and the license Infomnation (S16). Speciftoally, the 
content information generation unit 170 generates LT 
600 whfch Is comprised of LT header 61 0, LT action tag 
block 620 #1 having "2" in the number counter value for 

30 the action of reproduction, LT action tag block 620 #2 
having "1" for the number counter value for the action 
of moving, LT content key tag block 630 and LT footer 
640. The content infomnation encryption unit 175 en- 
crypts this content information (816). To be more spe- 

35 cific, the content information encryption unit 175 en- 
crypts the LT content key tag block 630 and the LT footer 
640. 

[0118] The communication unit 190 on the server 100 
sends the encrypted content key and the license Infor- 

"^0 mation as LT to the user terminal 200. 

[0119] In the Step SI 4, If the user right infomnation 
does not contain the right Infonnation of reproduction for 
the requested content, a reproduction disable response 
message is sent from the server 1 00 to the user terminal 

"^5 200. This reproduction disable response message is 
comprised of, for example, the message ID indicating 
that it is a response for the LT Issuance request mes- 
sage and the status ID indicating that the reproduction 
is disable since there is no UR-Us pertinent to the re- 

50 quest. 

[0120] On the other hand, in the user temninal 200, 
the communication unit 210 receiving the content infor- 
mation sends LT and the client ID stored In the ID Infor- 
mation storage unit 230 to the content infonnation de- 
55 cryption unit 250 after the LT has been stored In the LT 
storage unit 245 (SI 8). The content information decryp- 
tion unit 250 decrypts the encrypted content Information 
(LT) by the client ID, and passes the license information 
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and the content key to the license infonnation process- 
ing unit 260 (S18). 

[0121] The license infonnation processing unit 260 
checks the reproduction enable/disable information of 
the license information (S1 9). If OK to reproduce (S20), 
it passes the content key to the content decryption unit 
270. To put It concretely, the license Infonnation 
processing unit 260 checks If the nunnber counter forthe 
action of reproduction Is 1 or more. If it Is 1 or more, it 
passes the content key to the content decryption unit 
270. The content decryption unit 270 acquires the con- 
tent from the content storage unit 240 (S21), decrypts 
the content with the content key, and reproduces Track 
1, "Surf-riding George" under the management accord- 
ing to the extraction usage rules in the license Informa- 
tion processing unit 260 (S22). 

[0122] By the way, the LT action tag block 620#1 for 
the action of reproduction includes the count decision 
threshold value, the maximum continuous usage dura- 
tion, and the accumulated usage duration besides the 
number counter value. 

[01 23] Therefore, for content reproduction at the user 
terminal. It applies a method to decide reproduction is 
executed once if a certain period of time has passed 
since the start of reproduction. By distributing this Infor- 
mation about the certain period of time from the distri- 
bution server, it can be variable. 
[0124] It is also possible to apply the method as fol- 
lows. When content reproduction Is started, it is counted 
as once. And if it Is within a certain period of time from 
the start of the reproduction, any reproduction acts are 
regarded as the same reproduction and pennltted. The 
infonnation indicating its scope can be distributed and 
treated as the time limit for counting the reproduction as 
once. 

[0125] In other words, as shown in Fig. 1 7, as long as 
a certain period of time is set as the count decision 
threshold value, the reproduction is not counted as once 
if It Is less than the time (for instance, pre-reproduction). 
And reproduction Is counted as once when It reaches 
the count decision threshold value. And If the time is set 
In the maximum continuous usage duration, it can real- 
ize a flexible usage scheme, which makes It possible to 
make a suspension (a pause) during reproduction be- 
cause it just exercises the right of reproduction for once 
and the content can be reproduced periodically until it 
reaches the maximum continuous usage duration. Also 
If a certain period of time Is set in the accumulated usage 
duration, the content can be accumulatively reproduced 
until it reaches the accumulative usage duration. There- 
fore, a wide variety of content usage can be provided to 
the user. 

[0126] Furthermore, the policy for making decisions 
on the period available for reproduction can be changed 
based on the content type (for example, movie and mu- 
sic). 

[0127] When a reproduction disable response mes- 
sage Is received from the server 100 (S17), and the li- 



cense infonnation is unable to reproduce in Step 20, It 
terminates the process without reproducing the content. 
In this case reproduction disable is notified, for example, 
by a response message fonned with the status code 
5 ERROR_URUS, which indicates that there is no usage 
right UR-Us relevant to the request. Also, reproduction 
disable may be notified with LT containing the LT action 
tag block 620 of which reproduction number counter val- 
ue Is set to "0". 

10 [0128] Also, when the license infonnation stipulates 
the content can be used just once, the license informa- 
tion processing unit 260 deletes this license information 
after the content Is used, or triggers the flag to show it 
is no longer effective, and executes a process to nullify 
f5 the license information (LT). 

[0129] In case the license information contains multi- 
ple action rules (for example, reproduction and moving) 
and a combination of those is handled as the license 
Information for one content, only the rule pertinent to this 

20 particular usage (for example, reproduction) is nullified. 
[0130] Also, even If It Is a subscribed model, on one 
hand, unlimited number of usage may be pennltted to 
each of the content (for example, tier billing), but on the 
other hand, an upper limit Is defined forthe usage rule. 

25 (For example, the upper limit of a monthly charge is 
5000 yen for PPV (Pay Per View).) If there is the upper 
limit for the usage rule, at the confimriatlon of the user 
right infonnation, it validates whether the user holds the 
usage rule of the concerned content (validation of the 

30 pay per use model) after the aforementioned contract Is 
validated. Additionally, the user right infonnation DB 120 
may be split into the databases forthe contract informa- 
tion and for the usage rules to be managed respectively. 
[0131] If the license Infonnation allows to move or 

35 copy the content In this content usage management sys- 
tem 1 , It is possible to move the right information (usage 
rules) and the content key with the content to the exter- 
nal media 500b and 500c via the external media access 
unit 280. In such a case, the right information is moved 

40 and copied after it is converted into the data format sup- 
ported by the external media 500b and 500c. Moreover, 
encrypted conversion (re-encryption) is conducted to 
the content in an encryption method supported by the 
external media 500b and 500c. Similarly, the content 

45 key is converted into the encryption key corresponding 
to the encryption method supported by the external me- 
dia 500b and 500c. Using the external media in this way 
makes it possible to use the content, and at the same 
time, copyrights of the content are protected by a con- 

50 tent management method different from this content us- 
age management system 1 . However if the external me- 
dia is capable of supporting the content usage manage- 
ment system 1 in the present invention, it is unnecessary 
to have the data conversion of the right Information and 

55 encrypted conversion of the content. 

[0132] Fig. 1 8 Is a flow chart to show the process ex- 
ecuted at the user terminal 200a forthe case the content 
or LT is moved out to the external media. 
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[0133] If the content or LT is moved, the user at the 
user terminal 200a operates the operation unit 220 to 
display the moving content selection screen shown In 
Fig. 19. This moving content selection screen is com- 
prised of the title and content ID of the content pur- 
chased by the user at the user terminal 200a, or the li- 
cense ticket, etc. received In advance, these contents, 
check boxes for LT, a "Decide" button, etc. The user dis- 
plays the usage content selection screen shown in Fig. 
1 9, marks on the check box for the content he wants to 
move (for example, Surf-riding George) and clicks on 
the "Decide" button. 

[01 34] If there is a request for moving the content from 
the user, the license information processing unit 260 in 
the user terminal 200a passes the client ID stored in the 
ID information storage unit 230 and LT stored in the LT 
storage unit 246 to the content Information decryption 
unit 250. The content infomriation decryption unit 250 
decrypts the encrypted content Information (LT) by the 
client ID and passes the license infonnation and the con- 
tent key to the license information processing unit 260. 
[0135] The license infonnation processing unit 260 
checks the enable/disable information for moving the li- 
cense information, and decides whether it is O.K. or not 
O.K. to use, In other words, decides whetherthe number 
counter value in the LT action tag block 620#2 for the 
action of moving is 1 or more (in the case of "before use" 
or "after use and O.K. to use") (S31 ). If It Is available to 
use (Yes in S31 ), the external media 500b or the external 
media 500c validates through the content encryption 
unit 270 and the external media access unit 280 if the 
LT can be processed or not (S32). 
[0136] If it cannot be processed (No In S32), the li- 
cense information processing unit 260 decides whether 
the usage rules are fomiatted to the information convert- 
ed into the content control infonnation (S33). More spe- 
cifically, the license Infonnation processing unit 260 de- 
cides whether the external media 500b or the external 
media 500c can manage the content with the content 
control information In a secure, tamper-resistant mod- 
ule. If it can manage, then the license information 
processing unit 260 converts the LT action tag block 620 
#2 for moving to the content control information (S34), 
and passes the converted content control Information 
and the content key to the content decryption unit 270. 
The content decryption unit 270 acquires the content 
from the content storage unit 240, decrypts the content 
with the content key, and passes the decrypted content 
and the content control information provided from the 
license information processing unit 260 to the external 
media access unit 280. The external media access unit 
280 moves the decrypted content and the content con- 
trol Information provided from the content decryption 
unit 270 to the external media 500b or the external me- 
dia 500c (S35). 

[0137] Also, if the process in Step S32 is possible, the 
license infonnation processing unit 260 passes LT to the 
content decryption unit 270. The content decryption unit 



270 acquires the content from the content storage unit 
240, decrypts the content by the content key and passes 
the decrypted content and LT provided from the license 
Infonnation processing unit 260 to the external media 
5 access unit 280. The external media access unit 280 
moves the decrypted content and LT provided from the 
content decryption unit 270 to the external media 500b 
or the external media 500c (835). In this case, the con- 
tent decryption unit 270 passes the content without hav- 
10 ing it decrypted to the extemal media access unit 280, 
and the external media access unit 280 can move the 
content being encrypted to the extemal media 500b or 
the external media 500c (S35). 

[0138] Therefore, through the external media 500b or 
the external media 500c, the content is available for use 
in other temninals such as a mobile information terminal 
and a digital television receiver. 

[0139] If it Is not available for use in Step S31 , in other 
words, the number counter in the LT action tag block 
620 #2 for the action of moving is "0", or the external 
media 500b or the extemal media 500c cannot manage 
the content with the content control information in a se- 
cure, tamper-resistant module in Step S33, the license 
information processing unit 260 terminates the moving 
process. Therefore, its copyright is never infringed. 
[0140] Although the moving process has been ex- 
plained in this flowchart, it can also be applied to a cop- 
ying process if Step S35 is changed to the process for 
copying. Also, only the LT acquired in advance can be 
moved or copied to the external media 500b or the ex- 
ternal media 500c. 

[0141] As mentioned above, it is possible to make the 
content usage of each user be managed mainly at the 
server side in this system. Therefore, the server can 
grasp the usage status of the content at each terminal. 
Also, in case a certain service is provided due to a spe- 
cial campaign, etc. to expand the right that has already 
been acquired by the user, it can simply be realized by 
upgrading the user right infonnation stored on the dis- 
tribution sender. 

[0142] Meanwhile, the user terminal Just needs to 
control reproduction, moving, copying, etc. based on the 
license infonnation, so that it can get rid of having any 
extra loads of processes for managing complicated us- 
age rules. Also, the centralized usage rule management 
at the distribution server side can avoid any unauthor- 
ized use by the terminal such as alteration on the usage 
rules. 

[0143] As has been clarified from above explanation, 
by means of the content usage management system re- 
lated to the conformation of this embodiment, the server 
1 00 generates LT that is the right infonnation to indicate 
a part of the usage rule owned by the concerned user 
based on the user right information DB 1 20, which mem- 
orizes the right infonnation related to the usage rule of 
the content owned by the user who uses the user termi- 
nal 200a, and the request from the aforementioned user, 
is equipped with the content information generation unit 
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1 70 that sends it to the user terminal 200a, and the user 
terminal 200a is equipped with the communication unit 
210, which receives LT sent from the server 100, and 
the license information processing unit 260, which con- 
trols the use of the content according to the usage au- 
thorization indicated on the received LT. 
[01 44] Therefore, the terminal device doesn't need to 
manage all of the usage authorization owned by the us- 
er, is able to control the content usage just by managing 
a part of the user's usage authorization indicated on the 
license ticket so that it extensively reduces the loads of 
process required for the management in the terminal de- 
vice. Also, the server device is able to grasp the status 
of the content usage at each terminal device in conjunc- 
tion with the license ticket issuance. Even if a copy of 
the content is taken at the terminal, it can detect at what 
time the copy was taken on what media as a query is 
made to the server device for copy permission, which 
makes it possible to keep track of the content. Moreover, 
because the server device holds the usage authoriza- 
tion owned by the user, the usage rules of the user, etc. 
can be restored easily even if the storage mechanism 
(HDD) in the temriinal device is crashed. Also, It can eas- 
ily conduct the processes to add some usage rules and 
to provide service to expand the usage rules such as to 
add "1" automatically for the number of reproduction In 
the usage rules for the content. Furthermore, It ensures 
to prevent the content from being used unlimitedly by 
the terminal device, for the content usage control mech- 
anism In the terminal device controls the use of the 
abovementioned content according to the usage author- 
ization indicated on the received license ticket. 
[0145] In the embodiment above, the content, which 
Is not encrypted, is stored in the content DB 140, and 
then It is encrypted and distributed at the time of content 
purchase (Fig. 10, S5). However, the content key on the 
server 100 can encrypts the content in advance and It 
Is stored in the content DB 140. In this case, when there 
is a purchase request from the user, the encrypted con- 
tent can be sent as Is, which makes it possible to reduce 
the load of process on the server and the latency time 
of the user. 

[0146] Also, In the embodiment above, the explana- 
tion has been given forthe case to send the content and 
LT via communication, but it is also possible to send the 
content and LT through broadcasting. In this case, if the 
license information of the user is distributed to the user 
temriinal prior to the actual use of the content or the con- 
tent and LT are p re-distributed at the same time via 
broadcasting, it becomes possible to use the received 
content immediately and consequently it Improves the 
response when the content is used. Also, since It can 
eliminate the communication process at the time of con- 
tent usage, the load of process on the distribution server 
can be reduced. 

[0147] Additionally in the embodiment above, though 
the content information encryption unit 1 75 executes the 
encryption process for LT at the same time SAC Is gen- 



erated with the server terminals, the encryption process 
for LT handled by the content infomnation encryption unit 
175 may be omitted. 

[0148] Also, in case the license information is not yet 
5 encrypted when the license Information is acquired from 
the server, It may be encrypted by user-unique Infomna- 
tion such as a tennlnal ID (client ID) and stored when 
LT Is stored In the LT storage unit 245 so that disclosure 
of the content key. any unauthorized alteration and any 
10 unauthorized usage by other user can be avoided. How- 
ever, encryption is not required if the LT storage unit 245 
is realized in a tamper-resistant hardware. 
[0149] Also, it may apply to the formation that some 
recorded media such as CD-ROM, DVD-ROM to which 
15 various types of encrypted contents are recorded is dis- 
tributed as a supplement of magazines, and the user 
purchases only those he likes. Or it may also apply to 
the formation that a distributor side distributes various 
types of contents in advance by using the distribution 
20 channel in broadcasting, makes them stored in the con- 
tent storage unit 240 within the user terminal 220a, and 
the user purchases only those he likes. In these cases, 
if the usertakes an appropriate purchase procedure, the 
right of the content the user likes is generated in the user 
25 right infonnation DB 1 20 on the server 1 00. By doing so, 
It becomes possible for the user to make a request to 
issue LT when he uses the content. In this fomnation, 
since the cost spent for the content distribution can be 
restrained as much as possible, the effect to restrain the 
30 price of the content itself can also be expected. 

[0150] It may also apply to the fomnation that the re- 
cordable media such as CD-ROM, DVD-ROM where the 
encrypted content is recorded to is sold in the same way 
as the regular package. According to a registration pro- 
35 cedure taken by user who purchases such a recorded 
media, the right of the purchased content is generated 
in the user right information DB 120 on the server 100. 
Then, hereafter It becomes possible to request the LT 
issuance every time the content is used. 
40 [0151] Additionally, in the embodiment above, though 
the LT issuance request is made as soon as the user 
requests reproduction, It may apply the method to con- 
firm any LT existence at first in the LT storage unit 245. 
If there is LT, it validates whether reproduction can be 
45 executed with the LT or not. Then, if the reproduction is 
possible. It reproduces the content. Only if there is no 
LT, LT issuance can be requested. 
[0152] Also, in the formation of the abovementioned 
embodiment, if the user who requests to reproduce the 
50 content does not hold the right to reproduce it (No to 
Step SI 4 In Fig. 13), the reproduction disable is notified. 
However, it Is also possible forthe distribution server to 
conduct the process as an additional purchase for its 
reproduction right based on the consensus with the user 
55 or by a tacit agreement instead of giving a notice of re- 
production disable. In this case, the automatic purchase 
can simplify the purchase procedure since it only bills 
those that are used. 
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[0153] Although the explanation was given for the 
case that the license information contains the enable/ 
disable parameter allowing to do reproduction, moving 
or copying once, it is also possible for the license infor- 
mation to include the parameter either to show the per- 
mission only for once or for an unlimited number of con- 
tent reproduction, and the parameter either to show no 
permission or unlimited permission of content moving. 
In this case, when the license information shows unlim- 
ited permission, the license information processing unit 
260 in the user terminal 200a holds the content key and 
always provides the content key to the content decryp- 
tion unit 270. 

[0154] Furthermore, in the license infomnation, vari- 
ous types of the ru le f or the content can be set by a com- 
bination of multiple enable/disable infonnation. For ex- 
ample, only the reproduction enable/disable informa- 
tion, and the moving enable/disable Information are dis- 
tributed, and a combination of these can realize the 
process called "Check-in/Check-out." When the content 
is duplicated, *'Check-in/C heck-out" doesn't simply du- 
plicate it, it enables reproduction, disables moving (nat- 
urally, copying is disabled), and establishes a relation- 
ship between the parent content and the child content 
to prevent the child content from being moved freely. In 
the case of this license information, the "Check-in/ 
Check-out" infomnation is held on the distribution server; 
however, the enable/disable infonnation of "Check-in/ 
Check-out" is not especially required as the license in- 
formation. The relationship between the parent (server) 
and the child (storage media) when it is "Checked-in/ 
Checked-out" is managed at the server side or the re- 
cipient side, and It can be expressed as the distributing 
information only by the combination of reproduction and 
moving. Therefore, it makes it possible to reduce a 
number of parameters distributed to the user terminal 
and a load of process on the user terminal, and simply 
to control over the generation copies, such as to prohibit 
copies from the child to the grandchild. 
[0155] Also, in the configuration of above embodi- 
ment, though the propriety was checked in the LT footer 
640, it may include the information for detecting any al- 
teration to check the propriety by each LT action tag 
block 620#1 to 620#n. 

[0156] Also, in structure of above embodiment, the 
distributed license infonnation (LT) before use was 
stored in the LT storage unit 245 in the user terminal 
200a, LT may be stored temporarily In the external me- 
dia 500b or the external media 500c. 
[0157] Additionally, in case the user terminal 200 
moves the content to the extemal media 500b and 500c, 
the user tenninal 200a validates whether the moving 
was allowed. However, the server 100 may pre-deter- 
mine whether the destination of the external media 500 
is capable of processing the license information, and on- 
ly if it is capable, the server 100 may send the license 
infonnation that permits to move the content to the user 
terminal. At this time, the distribution server communl- 
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cates with the user terminal, acquires the information of 
the external media as its destination, and decides 
whether it's OK to move the content or not. 
[0158] Also, it is possible to make the external media 

5 access unit 280 in the user terminal 200a authenticate 
the external media 500a and 500c and the usertermlnal 
200a decide whether the external media 500a, 500c are 
capable of processing the license Information, or what 
content control information is possible to be processed. 

10 [0159] Furthermore, in the configuration of above em- 
bodiment, the server 1 00 manages content distribution, 
billing, etc. in bulk together with the right management; 
however, it may be configured to form each of the func- 
tion separately for content distribution, billing, etc. 

15 

Claims 



1 . A content usage management system that compris- 
^0 es a terminal device that uses a content as a digital 
production, and a server device that manages us- 
age of the content on the terminal device via a trans- 
mission line, 

wherein the server device includes: 

25 

a right infonnation memory unit operable to 
memorize right information related to a usage 
right of the content entitled to a user who uses 
the terminal device; and 

30 a license ticket issuance unit operable to gen- 

erate a license ticket based on a request from 
a user as right information that Indicates a part 
of the usage right entitled to the user and to 
send the license ticket to the tenninal device, 

35 and 

the terminal device includes: 

a receiving unit operable to receive the li- 
cense ticket from the server device; and 
a content usage control unit operable to 
control usage of the content according to 
the usage right Indicated on the received 
license ticket. 

45 2. The content usage management system according 
to Claim 1 , 

wherein the license ticket issuance unit ac- 
quires a request from the user that specifies a part 
of the usage right entitled to the user, generates a 
so license ticket corresponding to the request, and 
sends the license ticket to the tenninal device. 

3. The content usage management system according 
to Claim 1 , 

55 wherein the license ticket issuance unit gen- 

erates a license ticket that Indicates a minimum unit 
of a usage right included in the usage right entitled 
to the user and sends the license ticket to the ter- 
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minat device. 

4. The content usage management system according 
to Claim 1 , 

wherein a license tlcl<et includes one or mul- 
tiple numbers of enable/disable information regard- 
ing content usage. 

5. The content usage management system according 
to Claim 4, 

wherein the enable/disable infomriation indi- 
cates whether one of reproduction, moving and 
copying actions for the content is enabled or disa- 
bled. 

6. The content usage management system according 
to Claim 4, 

wherein the enable/disable infomriation indi- 
cates that usage of the content is allowed or not al- 
lowed once or more than once including unlimited 
numbers of times. 

7. The content usage management system according 
to Claim 1 , 

wherein the license ticket issuance unit sends 
a license ticket to the terminal device after the li- 
cense ticket is encrypted, 

the tennlnal device further includes a decryp- 
tion unit that decrypts the license ticket received by 
the receiving unit, and 

the content usage control unit controls usage 
of the content according to a usage right indicated 
on the decrypted license ticket. 

8. The content usage management system according 
to Claim 7, 

wherein the decryption unit and the content 
usage control unit are a tamper-resistant security 
module. 

9. The content usage management system according 
to Claim 1 , 

wherein the license ticket includes detective 
infomriation to detect whether any details of the li- 
cense ticket have been altered. 

10. The content usage management system according 
to Claim 1 , 

wherein the content usage control unit verifies 
whether a license ticket allows any further usage of 
the content after the content has been used, and 
deletes or invalidates the license ticket if it does not 
allow. 

11. The content usage management system according 
to Claim 10, 

wherein the terminal device further includes 
an external recordable media that is detachable, 



30 
and 

the content usage control unit stores a license 
ticket in the external recordable media if the license 
ticket before using the content and the license ticket 
s after using the content that pennits further usage of 
the content, allow to move the content. 

12. The content usage management system according 
to Claim 11, 

wherein the terminal device further includes a 
decision unit that decides whether the external re- 
cordable media connected to the tennlnal device is 
equipped with a control unit that controls usage of 
the content according to the usage right indicated 
'5 on the license ticket, and 

the content usage control unit stores the li- 
cense ticket to the external recordable media if the 
external recordable media is verified to include the 
unit to control usages. 

20 

13. The content usage management system according 
to Claim 12, 

wherein the content usage control unit con- 
verts the license ticket Into content control informa- 
25 tion in a different fornnat if the external recordable 
media Is verified not to Include the control unit for 
said content usage management system. 

14. The content usage management system according 
30 to Claim 6, 

wherein the enable/disable Information in- 
cludes a condition being as a basis for deciding the 
content is used once, and 

the content usage control unit decides that the 
35 content is used once based on the condition. 

15. The content usage management system according 
to Claim 14, 

wherein the condition is set according to a us- 
^0 age style of the content. 

16. The content usage management system according 
to Claim 15, 

wherein the condition is time duration spent 
to reproduce the content, and 

the content usage control unit decides the 
content is used once based on duration spent to re- 
produce the content. 

The content usage management system according 
to Claim 16, 

wherein the content usage control unit re- 
gards the usage as being taken place once if dura- 
tion from a start of the reproduction Is within time 
indicated in the condition. 

A server device that manages usage of a content in 
a temriinal device using the content as a digital pro- 
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duction via a transmission line including: 

a right infonnation memory unit that memorizes 
right information related to a usage right of the 
content entitled to a user using the terminal de- 
vice; and 

a license ticket issuance unit that generates a 
license ticket based on a request from the user, 
which is right infonnation Indicating a part of the 
usage right entitled to the user, and send the 
license ticket to the temninal device. 

19. The server device according to Claim 1 8, 

wherein the license ticket issuance unit ac- 
quires a request from the user to specify a part of 
the usage right entitled to the user, generates a li- 
cense ticket corresponding to the request, and 
sends the license ticket to the terminal device. 

20. The server device according to Claim 18, 

wherein the license ticket issuance unit gen- 
erates a license ticket that indicates a minimum unit 
of a usage right included in the usage right entitled 
to the user. 

21. The server device according to Claim 18 that further 
acquires information related to extemal recordable 
media connected to the terminal device from the ter- 
minal device based on a request from the user in- 
cluding: 

a decision unit that decides if the external re- 
cordable media contains a unit that controls us- 
age of the content according to the usage right 
indicated on the license ticket. 

22. A terminal device that receives permission of a 
server device via a transmission line and uses a 
content as a digital production including: 

a receiving unit that receives a license ticket as 
right information indicating a part of the usage 
right entitled to a user; and 
a content usage control unit that controls usage 
of the content according to the usage right in- 
dicated on the received license ticket. 

23. The terminal device according to Claim 22 that fur- 
ther includes a decryption unit that decrypts a li- 
cense ticket received from the receiving unit, 

wherein the content usage control unit con- 
trols usage of the content according to the usage 
right indicated on the license ticket decrypted. 

24. The temninal device according to Claim 22, 

wherein the content usage control unit de- 
cides whether the license ticket allows further us- 
age of the content after the content has been used, 
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and deletes the license ticket if It does not allow. 

25. The terminal device according to Claim 24 further 
including a detachable external recordable media, 

wherein the content usage control unit stores 
a license ticket to the external recordable media if 
the license ticket before using the content and the 
license ticket after using the content that permits 
further usage of the content allow to move the con- 
tent. 

26. The terminal device according to Claim 25 further 
Including a decision unit that decides whether the 
external recordable media connected to the termi- 
nal device is equipped with a control unit that con- 
trols usage of the content according to usage right 
indicated on the license ticket, 

wherein the content usage control unit stores 
a license ticket to the external recordable media if 
the external recordable media is verified to include 
the control unit. 

27. The terminal device according to Claim 26, 

wherein the content usage control unit con- 
verts the license ticket into content control informa- 
tion in a different format If the external recordable 
media is verified not to include the control unit. 

28. A content usage management method for a system 
including a terminal device that uses a content as a 
digital production and a server device that manages 
usage of the content in the terminal device via a 
transmission line, 

wherein the server device includes: 

a right information memory step to memorize 
right information related to a usage right of the 
content entitled to a user who uses the terminal 
device; and 

a license ticket issuance step to generate a li- 
cense ticket as right infonnation indicating a 
part of the usage right entitled to the user based 
on a request from the user, and 
the temninal device includes: 

a receiving step to receive a license ticket 
sent from the server device; and 
a content usage control step to control us- 
age of the content according to the usage 
right indicated on the license ticket re- 
ceived. 

29. The content usage management method according 
to Claim 28, 

Wherein, in the license ticket issuance step, 
the server device acquires a request from the user 
that specifies a part of the usage right entitled to the 
user, and generates a license ticket corresponding 
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to the request, and sends the license ticket to the 
teiminal device. 

30. A program used for a server device In a content us- 
age management system including a terminal de- 5 
vice that uses a content as a digital production, and 

a server device that controls usage of the content 
in the terminal device via a transmission line, the 
program having a computer function as the server, 
the server device including: io 

a right information memory unit that memorizes 
right infomriation related to a usage right of the 
content entitled to a user using the terminal de- 
vice; and IS 
a license ticket issuance unit that generates a 
license ticket based on a request from the user, 
which is right infomriation indicating a part of the 
usage right entitled to the user, and send the 
license ticket to the terminal device. 20 

31. A program used for a terminal device in a content 
usage management system including a terminal de- 
vice that uses a content as a digital production, and 

a server device that controls usage of the content 25 
in the terminal device via a transmission line, the 
program having a computer function as the terminal 
device, the terminal device including: 

a receiving unit that receives a license ticket as 30 
right information indicating a part of the usage 
right entitled to a user; and 
a content usage control unit that controls usage 
of the content according to the usage right in- 
dicated on the received license ticket. 35 
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Fig. 7 



User Right Info. Mgmt. Table 121 



User iD:pana03 



User ID:pana02 | 

User ID:pana01 

(Client ID.nat0 1 ) 

•Content IDIiTrack 1 
UR-Us ID1: Right lnfo.(License)A 
Remaining Info 

* No. of reproduction: 10 times 

Max. continuous usage duration: AO 
Count decision threshold value: 
Accumulated usage duration: Ox 
' No. of moving: 2 times 

• No. of copying: 3 times 



-Content ID2:Game 4 
UR-Us ID2: Right lnfo.(License)B 
Remaining Info 

• Usage duration: 2001/12/1^2002/1/31 

• No. of moving: 0 times 

• No. of copying: 0 times 



■Content ID3:Book 3 
UR-Us ID3: Right lnfo.(License)C 
Remaining info 
' Printing: 3 copies 



•Content ID4:MOMOM-DTV 
UR-Us ID4: Right lnfo.(License)D 
Remaining info 
* Usage duration: 2001/1/1~ 
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Fig. 8 
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Fig. 16 
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Fig. 18 
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